CVE-2016-3301

CVE-2016-3301 is a remote code execution vulnerability affecting the Windows font library across numerous Microsoft products, including various Windows versions, Office suites, and communication platforms. This vulnerability, dubbed "Windows Graphics Component RCE Vulnerability," carries a high CVSS score of 7.8, indicating a significant risk. It can be exploited by an unauthenticated attacker through user interaction, typically by convincing a victim to open a crafted document containing a malicious embedded font, leading to full compromise of the affected system. While not listed on the KEV catalog or showing active widespread exploitation, public exploit code (EDB-40255) exists, and its high EPSS score suggests a higher-than-average likelihood of future exploitation. Despite this, there is minimal community discussion or media coverage surrounding this CVE.